Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/E4yvvt196vs7XeMpUaVXZZj5Ybg.roa
File: E4yvvt196vs7XeMpUaVXZZj5Ybg.roa (raw, json)
Hash identifier: F7abYGHqDbBPf8CEJ84pVjgWKS2FXteqb7lV8H9GG8s=
Subject key identifier: 13:8C:AF:BE:DD:7D:EA:FB:3B:5D:E3:29:51:A5:57:65:98:F9:61:B8
Certificate issuer: /CN=d75e5d507257475f7281230654b39870fa4969dc
Certificate serial: 019F2368A39A3187677572249C8A66E26239
Authority key identifier: D7:5E:5D:50:72:57:47:5F:72:81:23:06:54:B3:98:70:FA:49:69:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/115dUHJXR19ygSMGVLOYcPpJadw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/E4yvvt196vs7XeMpUaVXZZj5Ybg.roa
Signing time: Thu 02 Jul 2026 15:18:07 +0000
ROA not before: Thu 02 Jul 2026 15:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12635
IP address blocks: 2001:4b69::/32 maxlen: 32
2001:4b6c::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/115dUHJXR19ygSMGVLOYcPpJadw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/115dUHJXR19ygSMGVLOYcPpJadw.mft
rsync://rpki.ripe.net/repository/DEFAULT/115dUHJXR19ygSMGVLOYcPpJadw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a3:9a:31:87:67:75:72:24:9c:8a:66:e2:62:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d75e5d507257475f7281230654b39870fa4969dc
Validity
Not Before: Jul 2 15:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=138cafbedd7deafb3b5de32951a5576598f961b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:63:57:18:69:bd:87:fd:9f:cf:15:a0:cc:07:
79:e1:04:c1:b2:3d:e2:3c:94:b5:2b:a5:44:51:49:
f4:9f:46:dd:eb:5b:53:1c:2c:6a:89:3f:7d:03:11:
2d:99:ed:17:be:0a:8f:4c:fe:14:fc:3c:05:93:28:
76:cd:43:26:69:73:7d:72:a7:d9:4c:dc:de:ce:e2:
1d:bd:4d:e2:fe:0e:05:77:01:41:cb:32:0b:0d:d4:
1a:8a:92:f6:91:d2:fa:81:7d:a3:d4:be:66:ce:3c:
03:02:b7:de:05:e9:10:6e:4c:05:6f:31:d2:28:68:
f1:26:68:be:a7:7f:c4:59:ed:cd:92:22:7d:3e:54:
f5:46:6c:9c:2c:fc:cb:ce:b3:1d:fb:d8:96:16:54:
d7:2b:60:c6:dd:56:c2:f2:e0:5d:fe:a5:b2:f1:4b:
42:5f:69:80:61:5b:0a:42:ee:d2:88:3e:b3:fd:af:
1a:27:41:eb:da:aa:bd:64:43:c5:d9:d4:58:7f:93:
c7:44:c8:19:14:c2:fa:77:52:21:18:15:4b:ea:72:
14:1e:63:2c:3f:ec:e7:66:c0:55:29:8a:26:7e:b4:
f9:5c:d4:e7:14:33:9a:09:0c:fc:a9:2a:04:bf:af:
45:8b:3e:8c:67:cf:a9:aa:a4:9d:01:74:bc:4f:9d:
ef:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8C:AF:BE:DD:7D:EA:FB:3B:5D:E3:29:51:A5:57:65:98:F9:61:B8
X509v3 Authority Key Identifier:
keyid:D7:5E:5D:50:72:57:47:5F:72:81:23:06:54:B3:98:70:FA:49:69:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/115dUHJXR19ygSMGVLOYcPpJadw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/E4yvvt196vs7XeMpUaVXZZj5Ybg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/115dUHJXR19ygSMGVLOYcPpJadw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:4b69::/32
2001:4b6c::/30
Signature Algorithm: sha256WithRSAEncryption
c4:30:78:c9:ea:78:5e:85:3b:5d:c2:7e:f1:4e:53:ce:0f:f1:
c1:81:85:18:1b:e6:a7:6a:66:af:90:38:5e:63:6c:ea:4a:38:
e9:26:58:ee:5e:9e:11:52:07:fb:40:4d:8c:6f:66:61:23:1f:
f4:89:48:96:27:26:96:f9:72:8c:1b:c9:40:61:78:95:72:6b:
54:e6:cd:7b:c1:73:06:d7:f1:f5:a0:19:cc:aa:f6:8d:db:8a:
14:4a:9d:1f:51:13:db:59:2a:f9:64:29:f5:e2:1f:4b:fa:71:
f0:36:ce:07:92:eb:58:c6:eb:43:1e:ab:62:29:b3:80:06:70:
86:3d:9c:a8:1d:d9:ad:3d:5b:b9:d8:b6:ed:f9:d4:8f:91:58:
6a:ac:d7:9f:45:1d:13:b8:87:eb:66:32:cf:f1:a9:65:74:6c:
a7:82:69:ff:6a:a1:05:a1:bc:85:da:16:7b:f5:65:fc:c3:ca:
fb:f1:a6:ff:b9:98:c1:43:6a:cc:5c:62:e7:9b:06:81:e2:06:
8c:9e:9d:3d:72:a9:74:5e:92:e5:73:60:23:66:2c:6a:75:af:
5d:1a:5a:1e:39:15:65:ca:eb:8e:13:c9:21:d2:0b:d8:5d:ff:
54:b7:c7:7a:09:3f:98:3f:13:3e:4a:b4:1c:4f:f5:49:bc:9e:
52:8f:76:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:48:37 2026 by rpki-client